What Your Browser Secretly Reveals About You (and How to Check)

You didn’t log in. You didn’t click “accept.” You just opened a web page — and it already knows your operating system, your screen size, your timezone, how many CPU cores you have, and enough tiny details to recognise you again later. This is browser fingerprinting, and almost every site does it. Here’s what’s actually being read, and how to see it for yourself.

Tracking that doesn’t need cookies

Most people know about cookies, and browsers now block or clear third-party ones fairly aggressively. Fingerprinting is the workaround. Instead of storing an ID on your device, a site reads a bunch of characteristics from your device and combines them into a signature. Any single detail is harmless — millions of people use the same browser version. But stack ten or fifteen of them together and the combination is often unique enough to single you out across sites, with no cookie required and nothing you can “clear.”

What a page can read the moment you arrive

Here are the most common signals — the same ones our Browser Privacy Check shows you:

Browser & OS — your full user-agent string (browser, version, operating system).
Languages — your preferred languages, which hint at your region.
Timezone — reveals roughly where in the world you are.
Screen — resolution, colour depth and pixel ratio, which narrow down your device.
CPU cores & device memory — rough hardware specs, part of your fingerprint.
Touchscreen — distinguishes phones and tablets from desktops.
Canvas fingerprint — the sneaky one. The site quietly draws text and shapes to a hidden canvas; tiny differences in how your GPU and drivers render them produce a near-unique ID. You never see it happen.
GPU (WebGL) — your exact graphics hardware is often readable directly.
Do Not Track & cookies — whether you signal a tracking preference (many sites ignore it) and whether cookies are enabled.

None of these ask for permission, because none of them are considered “sensitive” on their own. Combined, they’re a name tag.

Why the combination is what matters

Think of it like a description of a person. “Wears glasses” fits millions. “Wears glasses, 6’2”, red hair, left-handed, born in March“ fits almost no one. Fingerprinting works the same way: each attribute removes a chunk of the crowd until what’s left is effectively just you. Researchers have repeatedly shown that a majority of browsers are uniquely identifiable from these signals alone.

Check your own browser

The fastest way to understand this is to see your own footprint. Our Browser Privacy Check reads exactly what a tracker would, scores how exposed you are, and explains each signal in plain language — and it does the whole thing locally in your browser. Nothing is sent to a server; we never see your data or even your IP. (That’s the point: a privacy tool that phones home would be a contradiction.)

How to reduce your fingerprint

You can’t disappear entirely without breaking the web, but you can blend into a bigger crowd:

Use a browser that resists fingerprinting. Firefox has privacy.resistFingerprinting, Brave randomises key signals, and the Tor Browser is the gold standard — it makes everyone look identical.
Keep your browser stock. Ironically, piling on extensions and custom fonts can make you more unique. A vanilla, up-to-date browser blends in better.
Block third-party scripts with uBlock Origin — many fingerprinting scripts come from ad and analytics domains.
Turn off WebGL / canvas only if you’re willing to break some sites; it’s a trade-off.
Use a VPN to hide your IP — a separate signal fingerprinting often pairs with.

The realistic goal isn’t invisibility; it’s being one of many instead of one of one.

Privacy by design, not by promise

Fingerprinting is a reminder that “we don’t store your data” only goes so far if the data is being read in the first place. That’s why our own tools are built to keep your files on your device: the PDF, image and 3D tools process everything locally in your browser — nothing is uploaded, so there’s nothing to leak, log, or fingerprint against your files.

FAQ

Is browser fingerprinting legal? Broadly yes, though regulations like GDPR treat it as personal-data processing that needs a lawful basis and, often, consent. Enforcement varies.

Does incognito / private mode stop it? No. Private mode clears cookies and history when you close it, but your fingerprint — screen, GPU, fonts, canvas — is exactly the same.

Does the privacy check upload my data? No. It runs entirely in your browser; nothing is sent anywhere, including your IP.

What’s the single most effective fix? Using the Tor Browser (or Firefox with resist-fingerprinting) for anything sensitive — they’re designed to make your browser look like everyone else’s.

Curious what your browser is giving away? Run the Browser Privacy Check — it’s instant, private, and eye-opening.